Date: 4/6/2026

fix(pending-email-template-ui): double escape of product options
feat(admin-ui): ability to filter by invoice in user access records
fix(security): upgrade phpseclib/phpseclib 2.0.51 → 2.0.52 (CVE-2026-32935)
fix(security): upgrade league/oauth2-server 8.4.1 → 8.4.2 (CVE-2023-37260)
feat(signup): ability to exclude products from product bricks by category
Fix Am_Cron bugs: mcrotime typo, undefined $dbId, missing return on lock failure
Add flag emoji for locale display in language settings and translation forms
Replace addPassword with addSecretText in admin setup forms for security
fix Am_Html_Refs::checkCache() crash on PHP 8.x
php 8.5 deprecations fixed
fixed deprecated usage of Am_Block
fix(cart): incorrect redirect from cart signup page (double url(...) apply)
AM_THEME_PARAM_NAME - ability to switch theme per request (based on unique GET parameter)
feat(admin-ui): hide disabled admins by default
PHP 8.5 The setAccessible() methods of various Reflection objects have been deprecated, as those no longer have an effect.
PHP 8.5 deprecates Terminating case statements with a semicolon
PHP 8.5 deprecates $http_response_header
PHP 8.5 deprecates PDO::MYSQL_ATTR_USE_BUFFERED_QUERY
PHP 8.2 deprecates utf8_encode / utf8_decode
PHP 8.5 - deprecates non-canonical cast syntax like (boolean), (integer), and (double). Canonical forms are (bool), (int), and (float).
feat(admin-ui): ability to search payments by signup form
feat(cancel): static url for cancel action (useful to use in email templates)
fix(helpdesk): preserve separators after markdown links and add helper tests
feat(admin): ability to send test email for Protect Content -> E-Mail Messages
feat(helpdesk): ability to alter ticket menu from plugins
feat(helpdesk): markdown links format support in messages
Fix PHP 8.2 "Creation of dynamic property" deprecation warnings
Fix mb_convert_case() null deprecation in Am_Locale
Fix PHP 8.4 implicit nullable parameter deprecation warnings
Update ProductUpgradeTest for removed MemberController
Fix DbSync SQL generation for MySQL 8 compatibility
Fix AM_WIN regex to not match Darwin (macOS)
Fix @ error suppression in DB error handlers for PHP 8+
***Payments
    feat(paysys): centrobill-hosted - handle refund notifications
    feat(centrobill-hosted): cancellation support
    PaypalCheckout - PayPal no longer allows overriding plan prices at subscription creation time
    fix(ccbill): fix dynamic pricing digest mismatch and duplicate constant definition
    fix(stripe): security and correctness fixes for payment plugin
    fix(stripe): unlock ui in case of input error
***Plugins
    fix(softsale): offline grace timing
    fix(softsale): recurring-license expiry calculation
    fix(softsale): the bundled client’s cURL transport returns values in the wrong order
    fix(softsale): expired-license grace handling on the server is broken

Date: 2/25/2026

fix(ccbill): regression - fix formDigest calculation

Date: 2/24/2026

feat(payment-email): ability to set up payment emails based on billing plan
fix(pdf-invoice): do not persist pdf generated based on temporary (not saved) record
feat(i18n): ability to translate pages
feat(smtp): ability to use new connection for each email message
feat(i18n): ability to translate pending emails
feat(i18n): ability to translate autoresponder emails
feat(pay-page): live preview of invoice on pay page
fix(admin-ui): ability to search upgrades by product
fix(admin-ui): correctly auto populate second period settings based on first period settings if necessary
fix(admin-ui): display surcharge in correct currency for upgrade path display in admin interface
feat(admin-dashboard): clickable legend for Users Report widget
feat(admin-ui): handy UI to set fixed end date for billing plans
feat(adv-search): new conditions: Having active access only to
show 404 error for /page/*** if it is not correct link
fix(manual-rebill): does not allow to use manual rebill link outside of grace period
fix(internal): Am_Html_Ref::T_CODE throw error on inject
***Newsletter
    MailWizz plugin fixed
***Payments
    feat(paysys): New Payment System: Centrobill Hosted (https://centrobill.com)
    Fastspring-contextual - refunds fixed
    Paypal rare cancellation request issue fixed
    fix(braintree): allow to do manual renew if possible
    fix(netvalve): pass additional browser data to init 3ds process

Date: 1/12/2026

fix(saved-form): guarantee that all pages is valid before process
fix(report): correction of overflow to next month for monthy shifts
feat(admin): introduce billing plan categories (useful to setup coupons - restrict its usage only to some billing plan categories)
Webhooks module - supports PAYMENT_WITH_ACCESS_AFTER_INSERT
***Plugins
    Drupal plugin fixed to support version 10
    VBulletin supports 6.1
    feat(softsale): ability to setup license schemas based on billing plan
    SoftSale API - two new endpoints added to get list of available files and to download file
***Payments
    InovioPay payment plugin fixed
    fix(windcave): amount for manual rebill fixed
    fix(mycryptocheckout): validate IP of API origin server
    SmartDebit updated for new endpoints
    PaypalCheckout - enable-funding parameter added
    Braintree PHP SDK updated to minimal supported version 6.24.0, transparent redirect mode is not supported anymore

Date: 12/8/2025

Payments report - use table aliases for filters conditions to prevent potential error - Column '***' in where clause is ambiguous
feat(report): New report - Count of billing plan purchase
feat(personal-data): ability to cancel delete request on admin side
allow to see menu at signup form for some errors
feat(admin-ui): ability to search by subject in E-Mails History
GmailOauth fixed
new feature - ability to add new emailing method using hooks/plugin
***Payments
    Clover payment plugin added
***Newsletter
    MailWizz reworked to do not use SDK + allow debug mode
***Plugins
    Kernel Video Script protect plugin added
    SendX emailing method - does not support attachments
    feat(oauth2): ability to define client type (public|confidential) (method enableCodeExchangeProof is removed in 8.x)
    Notifications plugin - allow to use {d} placeholder
    Notifications plugin - add {H} total number of hours to countdown

Date: 9/12/2025

fix(regression): upload element does not allow to select uploaded file fixed
Correct description of bruteforce settings
feat(api): ability to customise Affiliate commission tab grid
***Plugins
    fix(gift-voucher): correct items within invoice with voucher (It can have different billing plans in some cases)